satanize ampersand

This commit is contained in:
WlodekM
2026-01-08 13:18:03 +02:00
parent 7bc1e8d928
commit ef9f6ba9c7

View File

@@ -53,7 +53,7 @@ function verifyToken(token) {
return split[0];
}
function sanitiseStringHTML(str) {
return str.replaceAll(">", "&gt;").replaceAll("<", "&lt;");
return str.replaceAll("&", "&amp;").replaceAll(">", "&gt;").replaceAll("<", "&lt;");
}
app.use(express.urlencoded());